Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 70.778700][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.169198][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 71.258937][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 71.268165][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=193 [ 71.277456][ T7] usb 1-1: SerialNumber: syz [ 71.287576][ T7] usb 1-1: config 0 descriptor?? [ 71.310227][ T8453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 71.332244][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 71.768776][ T8466] ------------[ cut here ]------------ [ 71.774509][ T8466] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.780919][ T8466] WARNING: CPU: 1 PID: 8466 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 [ 71.790617][ T8466] Modules linked in: [ 71.794547][ T8466] CPU: 1 PID: 8466 Comm: systemd-udevd Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 71.805503][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.815801][ T8466] RIP: 0010:usb_submit_urb+0xd27/0x1540 [ 71.821455][ T8466] Code: 84 d4 02 00 00 e8 f9 73 25 fc 4c 89 ef e8 21 bd 0d ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 80 da 26 8a e8 b4 5f 8b 03 <0f> 0b e9 81 f8 ff ff e8 cd 73 25 fc 48 81 c5 40 06 00 00 e9 ad f7 [ 71.841210][ T8466] RSP: 0018:ffffc9000164f870 EFLAGS: 00010286 [ 71.847295][ T8466] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 71.855344][ T8466] RDX: ffff888025f58000 RSI: ffffffff815dbea5 RDI: fffff520002c9f00 [ 71.863517][ T8466] RBP: ffff888026c1f100 R08: 0000000000000000 R09: 0000000000000000 [ 71.871650][ T8466] R10: ffffffff815d5cee R11: 0000000000000000 R12: 0000000000000001 [ 71.879724][ T8466] R13: ffff8880287720a8 R14: ffff8880190f9af0 R15: ffff88801676ba00 [ 71.887713][ T8466] FS: 00007f561b3e08c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 71.896715][ T8466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.903408][ T8466] CR2: 00007fffda0c68c8 CR3: 0000000020444000 CR4: 00000000001506e0 [ 71.911495][ T8466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.919706][ T8466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.927693][ T8466] Call Trace: [ 71.932083][ T8466] bcm5974_start_traffic+0xbd/0x170 [ 71.937847][ T8466] bcm5974_open+0x9f/0x160 [ 71.942358][ T8466] input_open_device+0x1bb/0x320 [ 71.947312][ T8466] ? bcm5974_resume+0xc0/0xc0 [ 71.952060][ T8466] evdev_open+0x538/0x6a0 [ 71.956416][ T8466] ? evdev_connect+0x4b0/0x4b0 [ 71.961476][ T8466] chrdev_open+0x266/0x770 [ 71.965908][ T8466] ? cdev_device_add+0x210/